Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa
File: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (raw, json)
Hash identifier: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=
Subject key identifier: 4C:FA:8C:7D:14:8A:E6:C2:22:A6:6E:FE:D8:CC:3F:FA:8E:AD:FE:91
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019423D734DC978D3428C3154DFD443D94A4
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52053
IP address blocks: 2a14:1d00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:34:dc:97:8d:34:28:c3:15:4d:fd:44:3d:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cfa8c7d148ae6c222a66efed8cc3ffa8eadfe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:31:b8:ab:c9:ae:c3:fd:41:b0:82:63:b7:
71:6b:5d:e7:6c:6e:39:10:9a:ac:89:ae:cd:63:92:
05:46:7b:dd:59:2e:27:b6:b5:3f:bf:76:25:84:ef:
32:fe:f1:8c:b4:96:eb:aa:62:ab:d6:8c:ba:5a:e5:
3a:db:ec:05:96:30:f6:b4:36:c0:48:40:4c:5c:10:
18:f6:a2:53:be:a2:2d:6b:67:a6:af:09:e1:88:76:
63:cd:34:8d:9a:17:4c:00:a6:57:9e:1b:fc:08:f1:
cd:11:f2:18:02:e4:91:be:ea:08:35:8c:bf:cd:10:
7d:50:d3:eb:71:ed:11:ef:9d:fd:48:ef:3c:3d:f8:
d8:bd:94:05:64:c1:07:f1:4a:29:be:f5:8c:9a:c9:
51:32:0b:11:75:f7:d5:f6:75:2c:b5:87:91:1b:c5:
1f:da:f0:a1:e7:60:24:aa:fe:ed:37:0d:7e:36:8a:
82:4a:72:5b:74:7f:8e:6d:17:65:9e:10:f8:a6:21:
f9:5f:38:15:63:64:a4:50:4c:1d:99:4d:1f:b1:70:
52:37:62:d9:db:15:d7:85:4f:91:b0:dc:05:65:17:
87:83:2d:7e:3e:69:01:d1:ea:37:5d:4f:ef:82:de:
65:98:ac:26:84:1e:2f:c6:af:3f:11:2c:0b:10:25:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FA:8C:7D:14:8A:E6:C2:22:A6:6E:FE:D8:CC:3F:FA:8E:AD:FE:91
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1d00::/44
Signature Algorithm: sha256WithRSAEncryption
3c:31:4e:c8:54:0d:8c:f0:f4:6d:7b:ba:60:65:88:40:7c:21:
f7:41:99:cf:84:af:f2:cb:da:8f:6c:15:16:35:f1:14:a2:00:
3a:12:06:76:e9:87:48:df:6e:52:ec:ec:80:11:d8:aa:39:00:
c3:02:1e:39:23:bc:5b:a4:83:33:a2:d4:03:56:78:b1:22:38:
52:60:de:b1:d3:4a:31:76:27:d3:0e:9d:f9:02:40:2f:36:d0:
b7:9b:c0:7e:49:cc:55:1b:50:28:3a:4c:5c:0d:3e:68:1e:78:
62:f3:16:39:be:50:ca:c9:56:b4:4d:38:ea:ae:c5:19:7a:3e:
2e:eb:81:3c:6b:e9:72:5d:51:d6:6b:a4:49:8d:1e:19:b9:c7:
7b:89:48:5f:8b:71:fd:cc:0a:a5:b1:38:38:bd:a7:07:b0:e0:
77:25:bc:73:1a:b5:cd:00:9d:7c:42:7d:e0:6e:89:98:94:27:
e8:3c:a2:cc:5c:6f:7c:f8:39:5e:07:d5:5d:06:93:a3:0b:9c:
43:78:8a:f6:34:36:3b:9b:da:10:93:93:a8:17:c6:36:bd:7a:
2c:f9:2b:ec:9c:35:eb:b3:ce:97:14:ac:55:44:8a:24:dc:cc:
fc:13:4d:d1:f0:f4:4b:fb:a9:7c:4c:8f:dc:97:aa:49:a1:79:
8a:f5:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:20 2025 by rpki-client